Security Specialist
Job Summary
The Security Specialist supports and improves the organization’s overall security posture through continuous monitoring, analysis, coordination, and execution of security activities. This role focuses on vulnerability management, threat analysis, attack surface visibility, data protection, endpoint and cloud security operations, and regulatory compliance across enterprise and cloud environments.
Essential Job Functions
- Monitor, analyze, and support remediation of security vulnerabilities across enterprise systems, applications, endpoints, cloud environments, and network infrastructure.
- Assess and prioritize security findings, threats, and control gaps based on business risk, attack exposure, and operational impact.
- Support incident response activities, including alert triage, threat investigation, escalation, documentation, and coordination with technical teams.
- Monitor and evaluate the organization’s attack surface to identify exposed assets, misconfigurations, unauthorized access risks, and security weaknesses.
- Support security operations within Microsoft Azure environments, including monitoring and administration activities related to Microsoft Defender, Microsoft Sentinel, Microsoft Purview, and related security technologies.
- Assist with endpoint, operating system, and network security initiatives, including configuration validation, compliance monitoring, access controls, firewall reviews, and device management activities.
- Support data governance and data security posture management initiatives, including data classification, labeling, access monitoring, and protection of sensitive information.
- Aid in the implementation, validation, and documentation of security controls aligned with regulatory, compliance, and cybersecurity frameworks, including NIST, CMMC, ISO, SOC, CIS, and FedRAMP standards.
- Maintain and update security policies, procedures, standards, audit evidence, operational documentation, and compliance tracking records.
- Collaborate with engineering, infrastructure, data, and compliance teams to improve security posture, support secure adoption of AI technologies, participate in security assessments and tabletop exercises, and recommend continuous improvement opportunities.
Leadership Competency Model
- Instills Trust
- Communicates Effectively
- Demonstrates Customer Focus
- Takes Initiative
- Makes Quality Decisions
- Drives Growth
- Ensures Accountability
- Drives Results
Work Environment and Physical Demands
- In office environment
- Prolonged periods sitting at a desk and working on a computer
- Must be able to lift up to 15 pounds at times
Planned Business Travel
This job requires no planned business travel.
Education and Experience
- Bachelor’s degree in Cybersecurity, Information Technology, or related field, or equivalent hands-on experience
- 3 - 6 years of practical experience in information security operations
- Experience working in enterprise SOC, IT security, or infrastructure teams
- Relevant industry certifications preferred, such as CompTIA Security+, Certified Ethical Hacker (CEH), Microsoft Azure security certifications, Microsoft Purview certifications, or other comparable cybersecurity and cloud security credentials
EEO Statement
DuraServ is an equal-opportunity employer. We prohibit discrimination and afford equal employment opportunities to team members and applicants without regard to race, color, religion, sex, sexual orientation, gender identity or expression, pregnancy, age, national origin, disability status, genetic information, protected veteran status, or any other characteristic protected by law. Our EEO policy applies to all aspects of the relationship between DuraServ and its team members, including recruitment, employment, promotion, transfer, training, working conditions, compensation, benefits, and application of policies.